Everyone using SonicWall firewalls in front of your farms UPDATE YOUR UNIT NOW

[DaveF]

If you are running a mining farm, or anything behind a SonicWall in general there was a major vulnerability posted about them.
You should update ASAP: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0010

For the most part even if they are out of support the firmware is available for free from SonicWall unless it's a REALLY old product.

-Dave

[1714884286]

1714884286

[1714884286]

1714884286

[1714884286]

1714884286

[philipma1957]

I corrected the spelling of the word update in the title. I Should have noticed it sooner.

[DaveF]

Heh, but we both missed I also munged the word firewall.
I was too cheap to buy that last vowel.

Spent most of the week doing updates what a pain. Makes you really wonder how many vulnerable units are out there.

-Dave

[DaveF]

23-Jan-2021 Update, if you are using a VPN to connect to a few SonicWall products they have found another vulnerability.

https://www.sonicwall.com/support/product-notification/urgent-security-notice-netextender-vpn-client-10-x-sma-100-series-vulnerability/210122173415410/

Not sure how many people are actually using them in the home / private / mining environment but some people might. If you have your stuff hosted somewhere and you need a VPN to connect you should find out what equipment they are using.

-Dave

[DaveF]

Necro Bump on 15-June-2021 BUT there is another vulnerability:

https://www.sonicwall.com/support/product-notification/security-advisory-sonicos-vulnerability-in-firewall-web-management-interface/210609115514740/

If there are this many issues with a 'real' product like a SonicWall, think about how many cheap home & SOHO firewall / routers there are out there with vulnerable firmware that people are just running.
How many are out there from manufacturers that don't even exist anymore so your only option would be to buy a new one.

-Dave